Brother Industries, Ltd Ads-2700we vulnerabilities

4 CVEs affecting Brother Industries, Ltd Ads-2700we, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8452, published 2025-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-51978, published 2025-06-25. Critical severity, CVSS 9.8. EPSS: 15.8% chance of exploitation in the next 30 days. An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target…
CVE-2024-51983, published 2025-06-25. High severity, CVSS 7.5. EPSS: 11.8% chance of exploitation in the next 30 days. An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device.…
CVE-2024-51984, published 2025-06-25. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If an existing password is present for an external service,…
CVE-2025-8452, published 2025-08-12. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brother-provided firmware. This serial…